NEW QUESTION 1

Which of the following security measures does the monitor correspond to?

• A. Intrusion Detection System
• B. Encrypted VPN
• C. Access control system
• D. Firewall

Answer: A

NEW QUESTION 2

Which of the following options are characteristic of symmetric encryption algorithms? (multiple choice)

• A. Fast encryption
• B. Confidential is slow
• C. Insecure key distribution
• D. High security of key distribution

Answer: AC

NEW QUESTION 3

HuaweiUSGfirewallVRRPThe advertisement packets are multicast packets, so each firewall in the backup group must be able to communicate directly at Layer 2.

• A. True
• B. False

Answer: A

NEW QUESTION 4

aboutSSL VPNdescription, which of the following is correct?

• A. Can be used without a client
• B. yesIPlayer to encrypt
• C. existNATcrossing problem
• D. No authentication required

Answer: A

NEW QUESTION 5

want to implement security policy"Anti-virus function", must beLicenseactivation.

• A. True
• B. False

Answer: A

NEW QUESTION 6

Which of the following options areISO27001the field of certification? (multiple choice)

• A. Access control
• B. personnel safety
• C. Vulnerability Management
• D. business continuity management

Answer: ABCD

NEW QUESTION 7

in configurationNATDuring the process, in which of the following situations, the device will generateServer-maptable entry? (multiple choice)

• A. configuration sourceNATautomatically generated whenserver-mapentry
• B. configureNATserverAfter success, the device will automatically generateServer-mapentry
• C. configureeasy-ipwill be generated whenserver-mapentry
• D. configureNAT No-PATAfter that, the device will establish a data stream for the configured multi-channel protocolserver-mapsurface

Answer: BD

NEW QUESTION 8

The administrator is connected to the firewall through the G1/0/0 interface (the interface has been added to the Trust Zone). If the administrator is allowed to perform configuration management through the G1/0/0 login image firewall, how to configure the security policy to release flow direction? ( )[Multiple choice]*

• A. allows traffic from Trust Zone to Trust Zone
• B. allows traffic from the Trust Zone to the Untrust Zone
• C. allows traffic from Local Zone to Local Zone
• D. allows traffic from the Trust Zone to the Local Zone (I)

Answer: ABC

NEW QUESTION 9

One of the following options for information security management systems (ISMS) Which of the four stages describes the sequence correctly?

• A. Plan->Check->Do->Action
• B. Check->Plan->Do->Action
• C. Plan->Do->Check->Action
• D. Plan->Check->Action->Do

Answer: C

NEW QUESTION 10

We should choose the encryption algorithm according to our own use characteristics. When we need to encrypt a large amount of data, it is recommended to use the ______ encryption algorithm to improve the encryption and decryption speed.[fill in the blank]*

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 11

Servers are classified by form factor, which of the following types can be classified? (multiple choice)

• A. blade server
• B. tower server
• C. rack server
• D. x86server

Answer: ABC

NEW QUESTION 12

Security technology has different methods in different technical levels and fields. Which of the following devices can be used for network layer security? (multiple choice)

• A. Vulnerability Scanning Device
• B. firewall
• C. Anti-DDoSequipment
• D. IPS/IDSequipment

Answer: BCD

NEW QUESTION 13

When the company's network administrator is performing dual-system hot backup, due to the possibility of inconsistent round-trip paths, if he wants to enable the session fast backup function, the command that needs to be entered is _______ [fill in the blank]*

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 14

When the user uses the session authentication method to trigger the firewall built-inPortalDuring authentication, users do not actively perform identity authentication, advanced service access, and device push"redirect"to the certification page

• A. True
• B. False

Answer: A

NEW QUESTION 15

HRP(Huawei Redundancy Protocol) protocol, which is used to synchronize data such as key configuration and connection status of the firewall to the standby firewall, which of the following options does not belong to the scope of synchronization?

• A. security strategy
• B. NATStrategy
• C. blacklist
• D. IPSSignature set

Answer: D

NEW QUESTION 16

aboutIPSec SA, which of the following statements is correct?

• A. IPSec SAis unidirectional
• B. IPSec SAis bidirectional
• C. Used to generate encryption keys
• D. Used to generate secret algorithms

Answer: A

NEW QUESTION 17

Which of the following traffic matches the authentication policy will trigger authentication?

• A. Access device or device-initiated traffic
• B. DHCP,BGP,OSPF,LDPmessage
• C. visitor accessHTTPbusiness traffic
• D. Article 1HTTPCorresponding to the business data flowDNSmessage

Answer: C

NEW QUESTION 18

When configuring security policies, you can control traffic based on the user's _______.[fill in the blank]*

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 19
......